Get Ready with H12-711 Exam Dumps (2022) [Q85-Q104]

By adminOn December 10, 2022

Rate this post

Get Ready with H12-711 Exam Dumps (2022)

Realistic H12-711 Dumps are Available for Instant Access

NEW QUESTION 85
Which of the following attacks is not a cyber-attack?

IP spoofing attack

Smurf attack

MAC address spoofing attack

ICMP attack

NEW QUESTION 86
Using a computer to store information about criminal activity is not a comouter crime

True

False

NEW QUESTION 87
Which of the following is not included in the steps of tie safety assessment method?

Manualaudit

Penetration test

Questionnaire survey

Data analysis

NEW QUESTION 88
ASPF (Application Specific Packet Filter) is a packet filtering technology based on the application layer, and implements a special security mechanism through the server-map table.
Which of the following statements about the ASPF and server-map tables are correct? (Multiple Choice)

ASPF monitors messages during communication

ASPF can dynamically create a server-map

ASPF dynamically allows multi-channel protocol data to pass through the server-map table.

The quintuple server-map entry implements a similar function to the session table.

NEW QUESTION 89
Which of the following is not the certificate save file format supported by the USG6000 series?

PKCS#12

DER

PEM

PKCS#

NEW QUESTION 90
After the firewall uses the hrp standby config enable command to enable :he standby device configuration function allthe information that can be backed up can be directly configured on the standby device, and the configuration on the standby device can be synchronized to the active device.

True

False

NEW QUESTION 91
Which of the following types of attacks does the DDoS attack belong to?

Snooping scanning attack

Malformed packet attack

Special message attack

Traffic attack

NEW QUESTION 92
Which of the following statement about the NAT is wrong?

NAT technology can effectively hide the costs of the LAN; it is an effective network security protection technology

Address Translation can follow the needs of users, providing FTP, WWW, Telnet and other services outside the LAN

Some application layer protocols carry IP address information in the data, but also modify the IP address information in the data of the upper layer when they are as NAT

For some non-TCP, UDP protocols (such as ICMP, PPTP), unable to do the NAT translation

NEW QUESTION 93
In the USG series firewall, you can use the______function to provide well-known application services for non-known ports.

Port mapping

MAC and IP address binding

Packet filtering

Long connection

NEW QUESTION 94
Firewall update signature database and Virus database online through security service center, requires the firewall can connect to the Internet first, and then need to configure the correct DNS addresses.

TRUE

FALSE

NEW QUESTION 95
Which of the following is an action to be t3ken during the summary phase of the cyber security emergency response? (Multiple Choice)

Establish a defense system and specify control measures

Evaluate the implementation of the contingency plan and propose a follow-up improvement plan

Determine the effectiveness nf the isnhtinn measures

Evaluation of members of the emergency response organization

NEW QUESTION 96
Regarding the description of the vulnerability scanning, which of the following is wrong?

Vulnerability scanning is a technology based on network remote monitoring of target network or host security performance vulnerability, which can be used for simulated attack experiments and security audits.

Vulnerability scanning is used to detect whether there is a vulnerability in the target host system.
Generally, the target host is scanned for specific vulnerabilities.

Vulnerability scanning is a passive preventive measure that can effectively avoid hacker attacks.

Vulnerability scanning can be done based onthe results of ping scan results and port scan

NEW QUESTION 97
Which of the following are international organizations related to information security standardization? (Multiple Choice)

International Organization for Standardization (ISO)

International Electrotechnical Commission (IEC)

International Telecommunication Union (ITU)

Wi-Fi Alliance

NEW QUESTION 98
Which of the following guarantees “should detect and protect spam at critical network nodes and maintain upgrades and updates of the spam protection mechanism” in security 2.0?

Malicious code prevention

Communication transmission

Centralized control

Border protection

NEW QUESTION 99
In most scenarios, NAT Inbound is used to the enterprise private network users to access the Internet scenario.

True

False

NEW QUESTION 100
Which of the following is not in the quintuple range?

Source IP

Source MAC

Destination IP

Destination port

NEW QUESTION 101
Against IP Spoofing, which of the following description is wrong?

IP spoofing is to use the hosts’ normal trust relationship based on the IP address to launch it

After IP spoofing attack is successful, the attacker can use forged any IP address to imitate legitimate host to access to critical information

An attacker would need to disguise the source IP addresses as trusted hosts, and send the data segment with the SYN flag request for connection

The hosts based on IP address’s trust relationship can login directly without entering password verification

NEW QUESTION 102
Execute the command on the firewall and display the following information, which of the following description is correct? (Multiple Choice) HRP_A [USG_A] display vrrp interfaceGigabitEthernet 0/0/1 GigabitEthernet9/0/1 | Virtual Router 1VRRP Group: Active state: Active Virtual IP: 202.38.10.1 Virtual MAC: 0000-5e00-0101 Primary IP: 202 38.10.2 PriorityRun: 100 PriorityConfig: 100 MasterPriority: 100 Preempt: YES Delay Time: 10

The status of this firewall VGMP group is Active.

This firewall G1 / 0/1 virtual interface IP address 202.30.10.2

This firewall VRID is 1 the VRRP priority to backup g’oup 100

Will not switch when the primary device fails

NEW QUESTION 103
Which of thefollowing are the default security zones of Huawei firewall? (Multiple Choice)

Zone area

Trust area

Untrust area

Security area

NEW QUESTION 104
When the IPSec VPN tunnel mode is deployed, the AH protocol is used for packet encapsulation. In the new IP packet header field, which of the following parameters does not require data integrity check?

Source IP address

Destination IP address

TTL

Idetification

Loading …

Download Exam H12-711 Practice Test Questions with 100% Verified Answers: https://www.testkingit.com/Huawei/latest-H12-711-exam-dumps.html

H12-711, HuaweiH12-711 exam preparation, H12-711 Interactive eBook, H12-711 latest study questions book, H12-711 new exam collection materials, H12-711 valid dumps demo, H12-711 valid exam discount voucher

Get Ready with H12-711 Exam Dumps (2022) [Q85-Q104]

Leave a Reply Cancel reply